SY0-701 practice questions 251–260

1. Question 251 · 607 in bank

   A systems administrator is concerned about vulnerabilities within cloud computing instances. Which of the following is most important for the administrator to consider when architecting a cloud computing environment?

   • ASQL injection
   • BTOC/TOU
   • CVM escape
   • DTokenization
   • EPassword spraying

   Show answer

   Answer: C

   Explanation

   GPT C. VM escape Explanation: In a cloud computing environment, particularly one using virtualization, VM escape is a critical vulnerability to consider. It occurs when an attacker exploits a vulnerability in a virtual machine (VM) to "escape" the VM and gain access to the underlying hypervisor or other VMs running on the same physical host. This poses a significant security risk in multi-tenant environments, such as those found in cloud computing.

   Source: Adapted from community discussion — Cloudboy

   Next question

2. Question 252 · 607 in bank

   A database administrator is updating the company’s SQL database, which stores credit card information for pending purchases. Which of the following is the best method to secure the data against a potential breach?

   • AHashing
   • BObfuscation
   • CTokenization
   • DMasking

   Show answer

   Answer: C

   Explanation

   In the case of storing credit card information, tokenization is ideal because it: Minimizes risk: Even if attackers gain access to the database, they cannot use the tokens to access the original credit card information. Complies with PCI DSS: Tokenization is widely recommended for compliance with Payment Card Industry Data Security Standards (PCI DSS), which govern the storage of credit card data.

   Source: Adapted from community discussion — laternak26

   Next question

3. Question 253 · 607 in bank

   Which of the following is a benefit of vendor diversity?

   • APatch availability
   • BZero-day resiliency
   • CSecure configuration guide applicability
   • DLoad balancing

   Show answer

   Answer: B

   Explanation

   Different vendors = different systems right? So think about it logically: all systems will not be vulnerable to the same type of vulnerability as they are different. The only answer that makes sense here is patch availability. Zero-day resiliency doesnt make sense as having different vendors does not necessarily protect you from zero-day exploits.

   Source: Adapted from community discussion — racer99_

   Next question

4. Question 254 · 607 in bank

   Which of the following enables the use of an input field to run commands that can view or manipulate data?

   • ACross-site scripting
   • BSide loading
   • CBuffer overflow
   • DSQL injection

   Show answer

   Answer: D

   Explanation

   The correct answer is: D. SQL injection SQL injection is a type of attack that involves inserting malicious SQL statements into an input field. These statements can then be executed by the database, allowing the attacker to view or manipulate the data. This can lead to unauthorized access to the database, data leakage, or even the modification and deletion of data. Here’s why the other options are not correct in this context: - A. This involves injecting malicious scripts into webpages viewed by other users, but it does not specifically involve running commands that directly view or manipulate data in a database. - B This typically refers to installing applications from unofficial sources, not related to input fields and running commands. -C. This involves exploiting a program by writing more data to a buffer than it can hold, potentially allowing the execution of arbitrary code, but it does not specifically use input fields to run commands on data.

   Source: Adapted from community discussion — Etc_Shadow28000

   Next question

5. Question 255 · 607 in bank

   An employee used a company’s billing system to issue fraudulent checks. The administrator is looking for evidence of other occurrences of this activity. Which of the following should the administrator examine?

   • AApplication logs
   • BVulnerability scanner logs
   • CIDS/IPS logs
   • DFirewall logs

   Show answer

   Answer: A

   Explanation

   A. Application logs Explanation: Application logs contain detailed information about the operations of specific applications, such as the billing system in question. These logs can provide records of user activities, system events, transactions, and other relevant information related to the fraudulent issuance of checks.

   Source: Adapted from community discussion — Segunmx

   Next question

6. Question 256 · 607 in bank

   An organization is looking to optimize its environment and reduce the number of patches necessary for operating systems. Which of the following will best help to achieve this objective?

   • AMicroservices
   • BVirtualization
   • CReal-time operating system
   • DContainers

   Show answer

   Answer: D

   Explanation

   Containers are a lightweight virtualization technology that allows you to package applications and their dependencies into portable units. This means that you can run multiple applications on a single operating system, reducing the number of operating systems and the associated patching requirements.

   Source: Adapted from community discussion — ProudFather

   Next question

7. Question 257 · 607 in bank

   Which of the following tasks is typically included in the BIA process?

   • AEstimating the recovery time of systems
   • BIdentifying the communication strategy
   • CEvaluating the risk management plan
   • DEstablishing the backup and recovery procedures
   • EDeveloping the incident response plan

   Show answer

   Answer: A

   Explanation

   The Business Impact Analysis (BIA) is a core component of an organization's Business Continuity Planning (BCP) process. The BIA identifies and evaluates the potential effects of disruptions to critical business operations due to disasters, system failures, or other incidents.

   Source: Adapted from community discussion — saba263

   Next question

8. Question 258 · 607 in bank

   Which of the following is a risk of conducting a vulnerability assessment?

   • AA disruption of business operations
   • BUnauthorized access to the system
   • CReports of false positives
   • DFinding security gaps in the system

   Show answer

   Answer: A

   Explanation

   Its A because it asks specically for the RISK in a vunerability assessment. A False Positive is just a result of a vulnerability assessment.

   Source: Adapted from community discussion — fab34

   Next question

9. Question 259 · 607 in bank

   Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?

   • ACreating a false text file in /docs/salaries
   • BSetting weak passwords in /etc/shadow
   • CScheduling vulnerable jobs in /etc/crontab
   • DAdding a fake account to /etc/passwd

   Show answer

   Answer: A

   Explanation

   A. Creating a false text file in /docs/salaries Explanation: This technique is an example of setting up a honeypot or decoy. A false text file labeled something enticing like "salaries" could attract the attention of an insider threat. If the malicious insider attempts to access it, their behavior can be monitored or flagged. This method does not compromise system security but instead acts as bait to detect malicious activity. Other Options: B. Setting weak passwords in /etc/shadow: Weak passwords would compromise system security and invite external attackers rather than serving as a monitoring tactic. C. Scheduling vulnerable jobs in /etc/crontab: This could lead to system exploitation and does not serve as a targeted method for insider threat detection.

   Source: Adapted from community discussion — Anyio

   Next question

10. Question 260 · 607 in bank

    An organization maintains intellectual property that it wants to protect. Which of the following concepts would be most beneficial to add to the company’s security awareness training program?

    • AInsider threat detection
    • BSimulated threats
    • CPhishing awareness
    • DBusiness continuity planning

    Show answer

    Answer: A

    Explanation

    A. Insider threat detection. Insider threat detection focuses on identifying and mitigating risks posed by individuals within the organization who may intentionally or unintentionally compromise the organization's sensitive assets, such as intellectual property. Since intellectual property is a key asset, employees (whether disgruntled, negligent, or malicious) can be a significant threat to its security. Training employees to recognize warning signs of insider threats, along with appropriate actions to take if they suspect suspicious behavior, is critical for protecting intellectual property.

    Source: Adapted from community discussion — Segunmx

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 251. 607 questions available.